Alternative to Tomcat 9 AJP connector for connecting Apache server with Tomcat

1.6k Views Asked by At

The application is using Single sign-on and previously we were using tomcat v7 AJP connector to connect Apache server with tomcat. After upgrading to Tomcat v9, the AJP connector is disabled by default in server.xml

<Connector protocol="AJP/1.3"
               address="::1"
               port="8009"
               redirectPort="8443" />

Will uncommenting this property solve the issue? Also I have read that AJP is disabled due to vulnerabilities :

https://community.microstrategy.com/s/article/Addressing-the-Apache-Tomcat-JServ-Protocol-AJP-Security-Vulnerability?language=en_US

If that is the case then is there an alternative to connect Apache server with Tomcat? Does this impact single sign-on functionality? Also, is there any configuration that can be done to mitigate the vulnerability and still use AJP?

0

There are 0 best solutions below